Clarify comment about postman secret